AltaVista search engine allows remote malicious users to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
altavista search intranet 2.0b |
||
altavista search intranet 2.3a |